Today the hosted MCP server exposes one flat list of builder tools: create and change tables, fields, views, automations and records. That is right for a builder, but an end user who connects Claude, ChatGPT or Copilot to SmartSuite wants to run the work, not build it. Request: a second, end-user layer of MCP tools that follows the business logic of each solution, the way the UI does. A toolbox per solution: a small set of named, described tools backed by what already exists in the solution (submit a form, read a saved view, read a dashboard's values, run an automation with typed inputs, create or update records in an allowed field list). Published by the solution manager; nothing exposed by default. Exposed only by the signed-in user's permissions, re-checked on every call, with the same attribution and audit as today. Found through one connector with a small meta layer (list toolboxes, search tools, run a tool), so the assistant loads only what it needs and the builder tools can sit behind a separate Build mode. Acceptance: the same request through the connector returns the same numbers a dashboard shows that user, and a form tool creates the same record with the same validation as the form in the app. Why: assistants connected to a flat builder tool list spend their context on structure and get the business process wrong. Toolboxes let a team expose "approve a purchase request" or "log a risk" without exposing "delete a table".